Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B325350C3B511EFBBC50495762E951A.roa
File: 0B325350C3B511EFBBC50495762E951A.roa (raw, json)
Hash identifier: v+GGySOAyY60EEYxA+qoFFNrFg3fMw5OtuDgBm30Zn0=
Subject key identifier: CC:ED:1E:66:F5:AA:9D:11:5C:96:8A:8D:14:84:FA:05:4C:D2:E2:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE6B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B325350C3B511EFBBC50495762E951A.roa
Signing time: Thu 26 Dec 2024 18:13:02 +0000
ROA not before: Thu 26 Dec 2024 18:12:58 +0000
ROA not after: Sun 12 Dec 2027 18:12:58 +0000
asID: 17561
IP address blocks: 45.205.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61035 (0xee6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 18:12:58 2024 GMT
Not After : Dec 12 18:12:58 2027 GMT
Subject: CN=676d9cad-1be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:48:dc:22:76:87:7c:1f:1d:72:8a:23:aa:
b5:02:80:7a:5d:92:d9:90:0e:3b:b3:f3:81:b6:99:
82:7b:ea:b7:86:1a:62:e3:f9:a8:66:e1:3d:db:9e:
64:e9:dc:f7:55:a2:89:f9:b6:18:75:64:42:58:c3:
5d:57:7b:99:e5:28:c4:fe:c2:4f:ee:98:c7:ee:8c:
aa:94:76:f5:ad:d8:11:7e:1f:be:9a:d3:d3:e5:86:
bb:17:23:4a:64:23:28:e9:a5:bb:b3:d1:11:55:86:
27:53:d4:7b:76:d2:ec:02:36:cd:33:51:25:1c:fb:
3c:56:8c:8f:b2:92:13:c0:df:eb:59:66:bb:16:e2:
a1:8d:fd:b6:a1:e8:9f:95:65:43:92:d4:a2:ab:30:
ae:9c:af:6b:08:5c:66:05:86:86:4e:4f:16:d9:fe:
18:92:c7:99:97:30:f4:54:07:89:8c:53:ee:e8:15:
c9:ff:60:41:08:e0:cf:a7:1b:36:ee:30:7e:d8:bc:
f2:ad:1a:ea:0b:7b:f5:b0:6a:cf:ea:ac:48:c1:74:
0e:62:a9:d7:cb:79:13:d6:7c:be:7b:cb:59:db:09:
0d:46:05:ae:36:c0:8b:2c:5c:43:14:52:9e:1f:32:
1d:f1:44:aa:be:74:e1:2f:e9:75:e0:6f:0b:e9:64:
4a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:ED:1E:66:F5:AA:9D:11:5C:96:8A:8D:14:84:FA:05:4C:D2:E2:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B325350C3B511EFBBC50495762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.7.0/24
Signature Algorithm: sha256WithRSAEncryption
25:16:50:c6:5b:45:ee:40:2c:10:a7:67:22:d2:f7:e7:46:14:
9d:fc:e0:47:0e:b4:9a:e9:30:32:6e:e4:bd:6a:7a:04:ff:41:
97:35:cb:9b:0b:6d:71:13:aa:ee:c2:b1:40:ba:66:75:7c:4c:
8d:4c:61:23:ad:0e:4b:aa:6d:6f:87:59:48:05:87:d2:62:ba:
cb:3b:26:ef:7a:c0:1e:5b:c2:0d:96:4d:b4:d9:e8:37:0d:f4:
53:22:2e:2d:0f:df:db:1f:dc:bf:49:dd:a1:df:21:12:7f:69:
e7:42:f4:92:33:dd:b5:cb:ab:2f:ef:21:35:37:81:45:20:59:
fb:04:bd:8d:37:90:b0:98:d1:75:17:92:f4:18:f4:48:ca:bd:
f6:3f:44:84:eb:79:9c:f2:1c:0d:dd:b5:48:13:31:c9:c3:88:
35:6f:f4:39:78:d5:92:bb:53:6c:5b:fc:09:0e:90:8d:6a:e3:
ae:d1:cc:c1:30:7d:f4:14:7f:06:7b:15:9d:fd:9a:14:93:b9:
bd:84:43:43:c1:59:26:15:2d:69:6c:3b:f5:99:aa:be:be:1f:
50:1e:6b:0f:3e:73:ab:8f:29:74:df:43:67:ac:c0:00:02:36:
c5:bf:97:82:32:c5:07:6e:b1:2b:a5:2a:bd:96:97:9e:62:96:
9f:bb:1f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:08 2025 by rpki-client